VULNERABILITY INTELLIGENCE

CVE-2021-21093

CVSS score7.8 HIGH

EPSS probability3.93%

CISA KEVNot currently listed

Published2021-04-15

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Weakness classification

psirt@adobe.com: CWE-788
nvd@nist.gov: CWE-787

Primary references

psirt@adobe.com — Vendor Advisory
psirt@adobe.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry